CLAIMS 

What is claimed is: 

1 1 . A computer system, comprising at least one processor, a system memory coupled to said 

2 processor, and at least one input/output device coupled to said processor, wherein the computer 

3 system processor is configured to execute: 

4 an operating system with at least two protection levels; 

5 a watchdog driver; 

6 at least one computer application; and 

& 7 a reset service; 

U 

1^ 8 wherein the watchdog driver observes at least one application for a periodic message from 

G 9 the application and wherein if the periodic message is not received in a predetermined period of 

'5 

I Jil 0 time, the watchdog driver instructs the reset service to initiate a reset procedure. 

m 

V. 

M 
is* 

J* | 1 2. The computer system of claim 1 further executing: 

|=2 2 a message passing interface configured to transmit signals between the two protection 

3 levels; 

4 wherein the watchdog driver is configured to execute in one protection level and the 

5 application is configured to execute in another protection level and wherein the periodic message is 

6 transmitted from the application to the watchdog driver through the message passing interface. 

1 3. The computer system of claim 2 wherein: 

2 the message passing interface is a shared memory queue. 
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1 4. The computer system of claim 1 wherein: 

2 the restart service is configured to close and restart the application upon receiving the 

3 instruction to initiate the restart procedure. 



1 5. The computer system of claim 1 wherein: 

2 the restart service is configured to restart the system upon receiving the instruction to 

3 initiate the restart procedure. 



? g 1 6. The computer system of claim 2 wherein: 

!g 2 the watchdog driver establishes timer events in the operating system scheduler that alert the 

O 

iQ 3 watchdog driver when the predetermined period of time has expired. 

m 

i Ft 

•i 

0 1 7. An application watchdog, comprising a restart service operating in the user mode of a 
IH 

j*f 2 computer operating system and a watchdog driver operating in the kernel mode of the computer 

jj, 3 operating system comprising, the watchdog driver comprising: 

4 a system thread configured to monitor a plurality of user applications operating in the user 

5 mode of the computer operating system; 

6 a first IOCTL signal interface for communicating control signals between the watchdog 

7 driver and each of said user applications; and 

8 a second IOCTL signal interface for communicating control signals between the watchdog 

9 driver and the restart service; 
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10 a communication interface for coordinating timer events with the operating system 

1 1 scheduler corresponding to each of said applications and indicating when each of said applications 

12 is presumed to be unresponsive; 

13 wherein if the system thread does not receive a message from one of said applications 



14 within an allotted period of time, the timer event alerts the watchdog driver that the allotted time 

1 5 has elapsed and the watchdog driver signals the restart service to restart that application. 



1 8. The application watchdog of claim 7 wherein: 

2 if the system thread does receive a message from one of said applications, the timer event 

Q 

|5j 3 corresponding to said application is updated to reflect the current time plus the allotted period of 
'--J 

q 4 time. 

m 

k 1 9. The application watchdog of claim 7 wherein: 

O 

M 2 the messages from said applications are sent periodically by the applications and directed 

W 

L 3 specifically to the watchdog driver. 



1 10. The application watchdog of claim 7 wherein: 

2 the messages from said applications are sent to the watchdog driver via a message passing 

3 interface between the user mode and kernel mode. 



1 11. The application watchdog of claim 7 wherein: 

2 the restart service is further configured to execute the following; 

3 user notification; 
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error logging; and 
multiple application reset. 

12. The application watchdog of claim 7 wherein: 

the plurality of applications are prioritized by a computer user to permit varying levels of 
watchdog protection. 

1 3 . The application watchdog of claim 7 wherein : 

the restart service is further configured to perform a system reset. 

14. A method of detecting and restarting an unresponsive computer application, comprising: 
executing the application in a first protective layer of a computer operating system; 
executing an application watchdog driver in a second, more protected, protective layer of 

the computer operating system; 

establishing a message passing interface between the application and the watchdog driver; 

periodically transmitting signals from the application to the message passing interface; 

executing a system thread in the watchdog driver that is configured to monitor the message 
passing interface for the periodic signals from said application or other applications; and 

executing a reset service that is configured to terminate and restart one or more 
applications; 

wherein if the system thread fails to detect the periodic signals from the application for a 
pre-configured amount of time, the watchdog driver initiates a command to the restart service to 
terminate and restart the application. 
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1 15. The method of claim 1 4 wherein: 

2 the message passing interface is implemented as shared memory queues. 

1 1 6. The method of claim 1 4 wherein the initialization of the watchdog driver comprises: 

2 loading the watchdog driver as the operating system loads following a computer system 

3 boot; 

4 loading and creating an initial input/output control signal interface that establishes the 

5 message passing interface; and 
*H 6 loading and creating a second input/output control signal interface for communication with 



1=1 7 the reset service. 

m 

m 

r, 1 17. The method of claim 1 6 wherein the initialization of the reset service comprises: 
\Pi 2 loading the reset service in the first protective layer of the computer operating system; and 

I* 3 calling the watchdog driver via the second input/output control signal interface to verify 

4 communication with the watchdog driver. 



1 1 8. The method of claim 1 7 wherein the initialization of the computer application comprises: 

2 linking the application with a dynamic link library; 

3 calling the watchdog driver via the dynamic link library and through the initial input/output 

4 control signal interface to validate the message passing interface; 

5 sending application location and identification information to the watchdog driver; and 

6 forwarding the application location and identification information to the reset service. 
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1 1 9. The method of claim 1 4 further comprising: 

2 setting up timer events with the operating system scheduler that alert the watchdog timer 

3 when the pre-configured amount of time has elapsed. 

1 20. The method of claim 1 9 wherein: 

2 when a periodic message is received by the system thread, resetting the timer events. 
1 21. A computer system, comprising: 

O 

j5 2 an operating system with at least two protection levels; 



^ 6 wherein the watchdog driver monitors at least one application for a periodic message fr< 

h 7 the application and wherein if the periodic message is not received in a predetermined period 
8 time, the watchdog driver instructs the reset service to initiate a reset procedure. 



1 22. The computer system of claim 2 1 wherein: 




a kernel mode watchdog driver; 



at least one user application; and 



a user mode reset service; 



2 



the reset procedure comprises closing and restarting the application. 



1 23 . The computer system of claim 2 1 wherein: 



2 



the reset procedure comprises restarting the operating system. 
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1 24. The computer system of claim 2 1 wherein: 

2 the watchdog driver creates timer events in the operating system scheduler that alert the 

3 watchdog driver when the predetermined period of time has expired. 



m 

i3 



□ 
U 

s 
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